← All credits
Evan NR | Patchstack Bug Bounty Program
20 vulnerability records and advisories credit this contributor.
CVE-2026-81794
WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability
CVE-2026-73190
WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66655
WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-66453
WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
CVE-2026-66451
WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
CVE-2026-42670
WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass vulnerability
CVE-2026-42669
WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability
CVE-2026-42683
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42671
WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability
CVE-2026-57376
WordPress ElementInvader Addons for Elementor plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability